Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a9d1d21-b018-37c5-9be9-878c86fd19ff.roa
File:                     5a9d1d21-b018-37c5-9be9-878c86fd19ff.roa (raw, json)
Hash identifier:          NONbv/FM/6UO+qkqFX667BUJB5vsFnSkQ5TVnz7mphM=
Subject key identifier:   2C:E2:C2:85:A9:C3:C7:2C:28:D2:AC:8D:CE:FA:03:96:AD:5C:94:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0B3B7FC3C8AF07B6CCD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a9d1d21-b018-37c5-9be9-878c86fd19ff.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        2603:2045:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b3:b7:fc:3c:8a:f0:7b:6c:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0320fb4e-8479-4b1e-9b4a-d71b0c337700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:50:fa:47:1e:28:a9:45:6d:b9:e6:65:c9:
                    39:41:e0:17:b3:2e:e4:90:54:c6:71:b7:c8:ab:ab:
                    c5:c2:4a:30:fe:74:f3:49:9d:d8:c3:dc:6a:de:b4:
                    9b:92:5d:37:aa:b4:cf:fe:84:48:dd:e5:9b:e0:b2:
                    c3:ff:61:a0:e3:2f:0f:c0:e2:b9:a9:02:60:60:c8:
                    5f:ac:12:6d:52:17:02:10:5d:55:c4:c6:51:63:fc:
                    68:5f:f9:0b:bf:f8:b8:9d:b4:30:68:a0:fe:dd:ba:
                    21:06:45:c8:b9:60:57:49:f8:d1:42:cb:b6:9f:b2:
                    0d:c6:35:41:75:09:17:cf:9b:8c:19:0d:aa:8e:e6:
                    69:78:c8:f9:5c:e9:7d:eb:9a:ea:00:ce:d5:24:b1:
                    22:d6:c7:72:11:c0:60:79:c8:5d:98:f6:a0:da:fd:
                    95:af:52:8e:5d:42:55:59:20:cb:20:de:02:56:9e:
                    e6:ab:71:7d:80:3a:92:84:15:c9:b7:11:45:ac:36:
                    8a:67:54:43:9b:11:1f:de:ae:a8:f7:85:d9:db:32:
                    12:e1:e8:ab:43:f0:63:9c:8f:07:38:7a:2c:47:4c:
                    e0:8a:1f:92:b1:56:ea:ea:43:87:1d:a5:20:91:e0:
                    f1:71:69:8f:eb:d8:91:8a:a5:bc:85:7e:55:df:23:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E2:C2:85:A9:C3:C7:2C:28:D2:AC:8D:CE:FA:03:96:AD:5C:94:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a9d1d21-b018-37c5-9be9-878c86fd19ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2045:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:46:52:a2:fe:2a:15:ae:49:f5:b3:33:ac:35:6d:c2:c4:
         e3:40:4a:87:94:fd:44:b9:65:b8:07:d5:46:47:26:d3:8a:ad:
         c0:ff:1e:ff:2f:a4:2c:2b:b4:be:94:e8:34:8d:ff:71:2c:5e:
         03:d9:85:19:d8:fe:0e:94:75:5e:57:31:3a:ee:f7:7d:72:5c:
         f7:86:76:fb:e1:46:07:92:38:a8:b9:37:17:d9:40:92:66:c8:
         5d:81:d5:f4:24:b6:ca:93:e8:bc:e7:04:10:26:eb:20:29:d4:
         3e:a4:8b:b3:e3:9c:95:3a:bd:20:68:f7:67:d0:e3:81:20:60:
         dd:38:28:e4:77:8a:54:bb:61:43:5a:55:43:11:28:93:c0:09:
         3c:5a:a8:27:8d:31:87:f7:c6:35:74:09:02:39:20:a2:11:b6:
         d7:1d:70:9f:8a:0e:76:85:cd:d1:5b:1a:d0:06:d6:72:9d:d7:
         12:d8:37:91:67:39:39:83:2c:50:20:2f:bf:17:ad:7d:9f:bc:
         99:ea:4f:7c:c5:22:11:fe:cb:71:ea:28:4f:6f:46:a4:5e:ed:
         03:ab:ca:35:af:fc:16:60:45:64:e9:c1:35:68:80:c5:d4:7b:
         7c:be:b8:46:54:6f:75:6f:b3:95:70:60:e5:2f:5c:1b:a8:d3:
         fe:35:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:18 2025 by rpki-client